Skip to content
OpenAdvisories
Medium ELSA-2025-11855 5 CVEs

Moderate: kernel security update (Oracle Linux 10)

Published Jul 30, 2025 · Updated Jul 30, 2025

Ecosystem: Oracle Linux

Summary

[6.12.0-55.24.1.0.1_0.OL10]
- nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]

Fixed packages 29

ReleasePackageFixed in
Oracle Linux · 10 kernel 0:6.12.0-55.24.1.0.1.el10_0
Oracle Linux · 10 kernel-abi-stablelists 0:6.12.0-55.24.1.0.1.el10_0
Oracle Linux · 10 kernel-core 0:6.12.0-55.24.1.0.1.el10_0
Oracle Linux · 10 kernel-cross-headers 0:6.12.0-55.24.1.0.1.el10_0
Oracle Linux · 10 kernel-debug 0:6.12.0-55.24.1.0.1.el10_0
Oracle Linux · 10 kernel-debug-core 0:6.12.0-55.24.1.0.1.el10_0
Oracle Linux · 10 kernel-debug-devel 0:6.12.0-55.24.1.0.1.el10_0
Oracle Linux · 10 kernel-debug-devel-matched 0:6.12.0-55.24.1.0.1.el10_0
Oracle Linux · 10 kernel-debug-modules 0:6.12.0-55.24.1.0.1.el10_0
Oracle Linux · 10 kernel-debug-modules-core 0:6.12.0-55.24.1.0.1.el10_0
Oracle Linux · 10 kernel-debug-modules-extra 0:6.12.0-55.24.1.0.1.el10_0
Oracle Linux · 10 kernel-debug-uki-virt 0:6.12.0-55.24.1.0.1.el10_0
Oracle Linux · 10 kernel-devel 0:6.12.0-55.24.1.0.1.el10_0
Oracle Linux · 10 kernel-devel-matched 0:6.12.0-55.24.1.0.1.el10_0
Oracle Linux · 10 kernel-doc 0:6.12.0-55.24.1.0.1.el10_0
Oracle Linux · 10 kernel-headers 0:6.12.0-55.24.1.0.1.el10_0
Oracle Linux · 10 kernel-modules 0:6.12.0-55.24.1.0.1.el10_0
Oracle Linux · 10 kernel-modules-core 0:6.12.0-55.24.1.0.1.el10_0
Oracle Linux · 10 kernel-modules-extra 0:6.12.0-55.24.1.0.1.el10_0
Oracle Linux · 10 kernel-tools 0:6.12.0-55.24.1.0.1.el10_0
Oracle Linux · 10 kernel-tools-libs 0:6.12.0-55.24.1.0.1.el10_0
Oracle Linux · 10 kernel-tools-libs-devel 0:6.12.0-55.24.1.0.1.el10_0
Oracle Linux · 10 kernel-uki-virt 0:6.12.0-55.24.1.0.1.el10_0
Oracle Linux · 10 kernel-uki-virt-addons 0:6.12.0-55.24.1.0.1.el10_0
Oracle Linux · 10 libperf 0:6.12.0-55.24.1.0.1.el10_0
Oracle Linux · 10 perf 0:6.12.0-55.24.1.0.1.el10_0
Oracle Linux · 10 python3-perf 0:6.12.0-55.24.1.0.1.el10_0
Oracle Linux · 10 rtla 0:6.12.0-55.24.1.0.1.el10_0
Oracle Linux · 10 rv 0:6.12.0-55.24.1.0.1.el10_0

Vulnerabilities 5

  • High 8.4
    CVE-2025-22121

    ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()

    In the Linux kernel, the following vulnerability has been resolved: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() There's issue as follows: BUG: KASAN: use-after-free in ext4_xattr_inode_dec_ref_all+0x6ff/0x790 Read of size 4 at addr ffff88807…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-37797

    net_sched: hfsc: Fix a UAF vulnerability in class handling

    In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a UAF vulnerability in class handling This patch fixes a Use-After-Free vulnerability in the HFSC qdisc class handling. The issue occurs due to a time-of-check/time-of-us…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2025-38110

    net/mdiobus: Fix potential out-of-bounds clause 45 read/write access

    In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access When using publicly available tools like 'mdio-tools' to read/write data from/to network interface and its PHY via C45 (cl…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-22091

    RDMA/mlx5: Fix page_size variable overflow

    In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix page_size variable overflow Change all variables storing mlx5_umem_mkc_find_best_pgsz() result to unsigned long to support values larger than 31 and avoid overflow. For example…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-38088

    powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap

    In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap memtrace mmap issue has an out of bounds issue. This patch fixes the by checking that the requested mapping region size shou…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu